Life. Inspiration. Perseverance. Comedy. Love

Nhs Data Processing Agreement

In Uncategorized on 13/12/2020 at 23:38

In entering into this contract, the processor orders the processor to process personal data/specific categories of personal data on its behalf for the purpose of providing services, including the purpose of use reports in an anonymous form. The data handler is responsible for the legal basis for the processing of personal data, including Schedule 1 of the Data Protection Act 2018. This agreement and its parts constitute written instructions from the data manager to the data manager to process personal data in the manner described in Table 1. The duration of the treatment is the duration of this contract. To ensure that people who process the data are covered by a confidentiality obligation. the General Data Protection Regulation (EU) 2016/679, a regulation on data protection and the privacy of all persons in the European Union; Implement appropriate technical and organizational measures to protect personal data and other confidential information from unauthorized or unlawful treatment and from accidental loss, destruction, damage, modification or disclosure. These measures are appropriate for damage that could result from unauthorized or illegal processing, accidental loss, destruction or deterioration of personal data and/or other confidential information. At least all data must be encrypted during transmission (with HTTPS via TLS 1.2 or more) and in standby mode via transparent data encryption (TDE); With respect to personal data, refers to any person (other than a staff member of the processing manager) who processes the data on behalf of the processor, who is accuRx in the event of an agreement; Assist the processing manager in compliance with his or her RGPD obligations with respect to processing security, notification of personal data breaches and data protection impact assessments. refers to the staff demographics service, the national computerized database containing data from patients with NHS such as name, address, date of birth and NHS number; help the person in charge of the treatment to provide access to the person concerned and to allow the person concerned to exercise all his other rights within the framework of the RGPD. The response to all information regarding the RGPD and other RGPD requests that can be received by the individuals concerned will be within 14 days. All these requests must be received by the person in charge of the processing and all communication with the persons concerned must be ensured through the person in charge of the processing. When requests are received by the data processor, the person concerned is generally advised to contact the processor.

This is an agreement between the following parties: information that does not relate to an identified or identifiable individual or personal data that has become anonymous (for example. B by aggregation) in such a way that the person concerned is not identifiable or can no longer be identified; The aims of treatment are only health and social protection objectives. For the above treatment, the type of treatment may include, but is not limited to: patient data is limited to the data needed to provide the meeting service and include: ways to reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or union membership and the processing of genetic data, biometric data for the purpose of clear identification of a natural person, data relating to a person`s health or sexual life; is the health care and/or social care organization that provides direct care, uses accuRx services to process patient data in their care; Healthcare is the head of certain personal data and specific categories of personal data and designates accuRx Ltd as a data processor in the provision of its services to provide data concerning patients, s